Lucene search
+L

493 matches found

CNVD
CNVD
added 2016/01/15 12:0 a.m.10 views

Microsoft Silverlight Denial of Service Vulnerability

Microsoft Silverlight is a cross-browser, cross-platform .NET implementation for building media experiences and interactive applications for the Web. Microsoft Silverlight incorrectly handles negative offsets in decoding, which a remote attacker can crash an application or execute arbitrary code ...

9.3CVSS8.9AI score0.69709EPSS
Exploits1References1
ThreatPost
ThreatPost
added 2016/01/13 9:1 a.m.149 views

Microsoft Silverlight Zero Day Vulnerability Patched

Microsoft Silverlight vulnerabilities certainly don’t have the same hacker cred as bugs in Adobe Flash, for example, but nonetheless, that does not diminish their value, nor does that mean they should be ignored. Microsoft patched a critical flaw in the application framework on Tuesday, and...

9.3CVSS8.9AI score0.99945EPSS
Exploits34References4
OSV
OSV
added 2016/01/13 5:59 a.m.2 views

CVE-2016-0034

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...

8.8CVSS6.2AI score0.69709EPSS
Exploits1References3
NVD
NVD
added 2016/01/13 5:59 a.m.19 views

CVE-2016-0034

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...

9.3CVSS9AI score0.69709EPSS
Exploits1References3
Prion
Prion
added 2016/01/13 5:59 a.m.18 views

Remote code execution

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...

9.3CVSS8.7AI score0.69709EPSS
Exploits1References2Affected Software1
canvas
canvas
added 2016/01/13 5:59 a.m.549 views

Immunity Canvas: MS16_006_SILVERLIGHT

Name| ms16006silverlight ---|--- CVE| CVE-2016-0034 Exploit Pack| CANVAS Description| ms16006silverlight Notes| CVE Name: CVE-2016-0034 VENDOR: Microsoft Notes: This module exploits a mishandling of negative offsets during a decoding. This situation could be exploited to overwrite with controlled...

9.3CVSS1.4AI score0.69709EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2016/01/13 2:0 a.m.5 views

CVE-2016-0034

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...

9AI score0.69709EPSS
Exploits1References2
CVE
CVE
added 2016/01/13 2:0 a.m.1038 views

CVE-2016-0034

Microsoft Silverlight 5 is affected by a remote code execution vulnerability (CVE-2016-0034) due to mishandling of negative offsets during decoding. Versions prior to 5.1.41212.0 are vulnerable; successful exploitation via a crafted web page can lead to arbitrary code execution or DoS. Several co...

9.3CVSS8.8AI score0.69709EPSS
In wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2016/01/13 2:0 a.m.43 views

CVE-2016-0034

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...

9AI score0.69709EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2016/01/13 12:0 a.m.3 views

PT-2016-1037 · Microsoft · Silverlight

Name of the Vulnerable Software and Affected Versions: Microsoft Silverlight versions prior to 5.1.41212.0 Description: The issue is related to the mishandling of negative offsets during decoding, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service vi...

9.3CVSS8AI score0.69709EPSS
Exploits1References8
ATTACKERKB
ATTACKERKB
added 2016/01/13 12:0 a.m.23 views

CVE-2016-0034

Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka “Silverlight Runtime Remote Code Execution Vulnerability.” Recent...

9.3CVSS8.9AI score0.69709EPSS
In wildExploits1References3
OpenVAS
OpenVAS
added 2016/01/13 12:0 a.m.56 views

Microsoft Silverlight Remote Code Execution Vulnerability (3126036)

This host is missing a critical security update according to Microsoft Bulletin MS16-006. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS8.2AI score0.69709EPSS
Exploits1References4
Microsoft Security Update
Microsoft Security Update
added 2016/01/12 6:0 p.m.9 views

Security Update for Microsoft Silverlight (KB3126036)

This security update to Silverlight includes fixes outlined in KB 3126036. This update is backward compatible with web applications built using previous versions of Silverlight...

3.1AI score
Exploits0
ThreatPost
ThreatPost
added 2016/01/12 3:41 p.m.13 views

Microsoft Patches Six Critical Flaws with January 2016 Updates

Microsoft released a scant nine bulletins today for Patch Tuesday, but six of them are marked critical and seven can lead to remote code execution. The updates, which address 25 vulnerabilities will be the last many who run Internet Explorer 8, 9, and 10 will receive unless they elect to update t...

8.3AI score
Exploits0References10
Check Point Advisories
Check Point Advisories
added 2016/01/12 12:0 a.m.28 views

Microsoft .NET Silverlight Manifest Resource File Information Disclosure (CVE-2015-6114)

An information disclosure vulnerability exists in Microsoft .NET Silverlight manifest resource parsing functionality. The vulnerability is due to an error while processing a corrupted manifest. An attacker can exploit this vulnerability by supplying a specially crafted resource through a .NET or...

4.3CVSS5.6AI score0.19485EPSS
Exploits0
Symantec
Symantec
added 2016/01/12 12:0 a.m.50 views

Microsoft Silverlight CVE-2016-0034 Remote Code Execution Vulnerability

Description Microsoft Silverlight is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition. Technologies Affected...

9.3CVSS1.7AI score0.69709EPSS
Exploits1References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/01/12 12:0 a.m.25 views

Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)

A remote code execution vulnerability exists in Microsoft Silverlight. The vulnerability is due to incorrect handling of certain open and close requests that can result in read and write access violations. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...

9.3CVSS2.3AI score0.69709EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2016/01/12 12:0 a.m.45 views

MS16-006: Security Update for Silverlight to Address Remote Code Execution (3126036)

The version of Microsoft Silverlight installed on the remote Windows host is affected by a remote code execution vulnerability due to a flaw that allows strings to be decoded by a malicious decoder that returns negative offsets. An unauthenticated, remote attacker can exploit this vulnerability, ...

9.3CVSS9.1AI score0.69709EPSS
Exploits1References2
Kaspersky
Kaspersky
added 2016/01/12 12:0 a.m.70 views

KLA10737 Code execution vulnerability in Microsoft Silverlight

Improper strings handling was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content. Technical details This vulnerability can be triggered while Silverlight...

9.3CVSS9.1AI score0.69709EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2016/01/12 12:0 a.m.47 views

MS16-006: Security Update for Silverlight to Address Remote Code Execution (3126036) (Mac OS X)

The version of Microsoft Silverlight installed on the remote Mac OS X host is affected by a remote code execution vulnerability due to a flaw that allows strings to be decoded by a malicious decoder that returns negative offsets. An unauthenticated, remote attacker can exploit this vulnerability,...

9.3CVSS9.1AI score0.69709EPSS
Exploits1References2
Rows per page
Query Builder